Restrict access to data based on group or department criteria

[gracielatriv]

Hello dear community!

I am trying to give access permissions to a data set in my one lake. The intention is to have the entire set of company data there and then according to the department or a specified group of people, filter my set so that each one sees their data and not that of the others, or according to which groups can or cannot access to a set of data. I would like to create dataset, lakehouse , warehouses with the data filtered according to my people group criteria. How can I do this?
Thank you very much in advance!!

[AndyDDC]

Hi @gracielatriv there is row and column level security available which will help restrict certain data to certain people/groups 

https://blog.fabric.microsoft.com/en-us/blog/announcing-column-level-row-level-security-for-fabric-w...

[gracielatriv]

Hello @AndyDDC !!

What a coincidence, I just saw one of your videos on YouTube talking about using domains to group workspaces. Can I use domains to achieve my goal of partitioning my enterprise data set or is the new addition of row or column level security better?

thank you so much !!

[AndyDDC · Accepted solution]

At the moment domains themselves can't separate workloads from users/groups, that's still at the workspace level. Users/groups can be assigned to workspaces then workspaces to domains.

However this operates in a level above row/column level security. Workspace security is more about the user being able to access the object itself like a report, dataset, lakehouse. Whereas row/column level security is what data within those items they can see. You can conbine workspace and rls/cls. I hope that helps. 

[gracielatriv]

It was the information I needed, thank you very much @AndyDDC !!
I will go into more detail on these two terms.

[Anonymous]

Hi @gracielatriv ,
Glad that your query got resolved. Please continue using Fabric Community for any help regarding your queries.